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DETAILED ACTION 

The instant application 10/517,574 is presented for examination by the examiner. 
Claims 1,6-9, 16, 18-22, 24, 26, 28, 30, 32, 34, and 35 are pending 



EXAMINER'S AMENDMENT 

An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1 .312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview 
with Guy Eriksen on 12/3/09. 

The application has been amended as follows: 

1 . (as currently amended) An apparatus Apparatus adapted to communicate via a network, 
comprising: 

a firewall including a set of rules for identifying packets associated with inappropriate 
activity, the rules in the set being separated into a plurality of classes; and 

an indicator device for providing a plurality of user discernable indicators, wherein each 
of the plurality of user discernable indicators is associated with a different one of the plurality of 
classes and is visually discernable, and wherein a respective one of said plurality of user 
discernable indicators is triggered if one or more of the rules corresponding to one of said 
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plurality of classes associated with the respective one of said plurality of user discernable 
indicators is violated, 

wherein the rules in the set are prioritized such that each of the plurality of classes 
represents a respective different one of a plurality of priority levels, 

wherein each of the plurality of user discernable indicators except a particular one is 
associated with the respective different one of the plurality of classes, the particular one of the 
plurality of user discernable indicators being associated with an affirmative status that filtering is 
being contemporaneously performed for any of the packets that violate the one or more rules, 
and wherein the method further comprises filtering any of the packets that violate the one or 
more rules, and wherein the particular one of the plurality of user discernable indicators is 
concurrently triggered, along with the respective one of the plurality of user discernable 
indicators, to indicate that the filtering is being contemporaneously performed, only when a 
number of the packets that violate the one or more rules exceeds a pre - spccificd threshold 
wherein the particular one of the plurality of user discernable indicators along with the respective 
one of the plurality of user discernable indicators are concurrently triggered, only when a number 
of the packets that violate the one or more rules exceeds a pre-specified threshold to indicate that 
the filtering any of the packets that violate the one or more rules is being contemporaneously 
performed. 

16. (as currently amended) A cable modem, comprising: 
downstream processing circuitry; 
upstream processing circuitry; 

a controller in communication with said downstream circuits, upstream circuitry, and a 
memory; 

a firewall program including a set of rules for identifying packets associated with 
inappropriate activity, the rules being separated into a plurality of classes, said firewall program 
being resident in said memory and executable by said controller to cause examining data of 
packets from said downstream and upstream circuitry; and 

a plurality of user discernable indicators that are each visually discernable, wherein each 
of the plurality of user discernable indicators is associated with a different one of the plurality of 
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classes and wherein a respective one of said plurality of user discernable indicators is triggered if 
one or more of the rules corresponding to one of said plurality of classes associated with the 
respective one of said plurality of user discernable indicators is violated, and wherein the rules in 
the set are prioritized such that each of the plurality of classes represents a respective different 
one of a plurality of priority levels, 

wherein the firewall program is executable by said controller to cause filtering any of the 
packets that violate at least one of the rules, and wherein each of the plurality of user discernable 
indicators other than a particular one is respectively associated with the different ones of the 
plurality of classes, the particular one of the plurality of user discernable indicators being 
associated with an affirmative status that filtering is being contemporaneously performed, and 
wherein the particular one of the plurality of user discernable indicators is triggered, concurrently 
with the triggering of the respective one of the plurality of user discernable indicators, if the one 
or more of the rules is violated, the filtering is performed by the firewall program, and a number 
of the packets that violate the one or more rules exceeds a pre-specified threshold. 

19. (as currently amended) The cable mode m apparatus of claim 16, wherein said plurality of 
user discernable indicators comprises a highlighted icon displayed on a computer device. 

22. (as currently amended) The cable mode m apparatus of claim 16,wherein the firewall 
program is executable by said controller to cause filtering of any of the packets that violate the 
one or more rules irrespective of a number of the packets that violate the one or more rules, but 
wherein the respective one of the plurality of user discernable indicators is triggered only when 
the number of packets that violate the one or more rules exceeds a pre-specified threshold. 
32. (as currently amended) The cable mode m apparatus of claim 16, wherein only the particular 
one of the plurality of user discernable indicators is triggered if the one or more of the rules is 
violated, the filtering is performed by the firewall program, and the number of the packets that 
violate the one or more rules does not exceed a pre-specified threshold. 
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34. (as currently amended) The cable mode m apparatus of claim 16, wherein whether the 
respective one of the plurality of user discernable indicators is triggered or not is based on which 
of the plurality of priority levels is involved with respect to a corresponding rule violation. 



In the specification: 

The paragraph beginning on page 12, line 28 is marked up below: 

Optional steps 308, 312, and 3 16344 provide a threshold level that must be 



Reasons for Allowance 

The following is an examiner's statement of reasons for allowance: 
Applicant's arguments, filed 10/27/09, with respect to claims 1, 7, and 16 have 
been fully considered and are persuasive. 

The closest prior art of record fails to teach "wherein the particular one of the 
plurality of user discernable indicators along with the respective one of the plurality of 
user discernable indicators are concurrently triggered, only when a number of the 
packets that violate the one or more rules exceeds a pre-specified threshold to indicate 
that the filtering any of the packets that violate the one or more rules is being 
contemporaneously performed" in combination with rest of the claims' limitations. Each 
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of the independent claims contains an equivalent limitation in scope. This specific 
scenario with respect to the indicators, filtering, and threshold in conjunction with the 
claim firewall would not have been obvious to one of ordinary skill in the art. 



Allowable Subject Matter 

Claims 1 , 6-9, 16, 18-22, 24, 26, 28, 30, 32, 34, and 35 are allowed. 

Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 
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Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to MICHAEL R. VAUGHAN whose telephone number is 
(571)270-7316. The examiner can normally be reached on Monday - Thursday, 7:30am 
- 5:00pm, EST. If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, William Korzuch can be reached on 571-272-7589. The fax 
phone number for the organization where this application or proceeding is assigned is 
571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/M. R. V./ 

Examiner, Art Unit 2431 



/William R. Korzuch/ 

Supervisory Patent Examiner, Art Unit 2431 
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